Struct AppState 

pub struct AppState {

    pub config: Arc<Config>,
    pub secrets: Arc<ResolvedSecrets>,
    pub db: AnyPool,
    pub db_ro: AnyPool,
    pub db_kind: DbKind,
    pub cas: Arc<IndexMap<String, Arc<CaState>>>,
    pub default_ca_id: Arc<String>,
    pub otp_store: Option<Arc<OtpStore>>,
    pub hsm: Option<Arc<HsmContext>>,
    pub audit: Arc<AuditState>,
    pub failure_tracker: Arc<FailureTracker>,
    pub ha_manager: Option<Arc<HaManager>>,
    pub gss_cred: Option<Arc<dyn Any + Send + Sync>>,
    pub gssapi_require_crypto: bool,
    pub dogtag: Option<Arc<DogtagPool>>,
    pub star_manager: Option<Arc<StarManager>>,
    pub startup_time: Instant,
}

Top-level application state cloned into every axum handler.

Fields

config: Arc<Config>

Parsed and validated configuration.

secrets: Arc<ResolvedSecrets>

Resolved secrets (never serialized to disk).

db: AnyPool

Primary database connection pool (read-write).

db_ro: AnyPool

Read-only database connection pool.

For SQLite WAL mode, this is a ?mode=ro pool that never acquires the write lock, enabling concurrent reads during writes. For PostgreSQL/MariaDB, this is a clone of db (MVCC handles concurrency natively).

db_kind: DbKind

Database backend discriminant (drives BEGIN IMMEDIATE for SQLite).

cas: Arc<IndexMap<String, Arc<CaState>>>

All CAs keyed by their id, in config declaration order.

default_ca_id: Arc<String>

The CA designated as the default for unlabeled EST requests.

otp_store: Option<Arc<OtpStore>>

OTP store (present when [otp] is enabled).

hsm: Option<Arc<HsmContext>>

HSM context (present when [hsm] is configured).

audit: Arc<AuditState>

Shared audit state (overflow flag, alarm counter).

failure_tracker: Arc<FailureTracker>

Authentication failure tracker / lockout enforcer (FIA_AFL.1).

Always present; a max_failures = 0 policy makes every operation a no-op so the control can be disabled without a None branch at call sites.

ha_manager: Option<Arc<HaManager>>

HA manager for multi-CA failover (present when HA is configured).

gss_cred: Option<Arc<dyn Any + Send + Sync>>

Server-side GSSAPI credential for SPNEGO authentication.

None when GSSAPI is not configured. When present, the auth layer uses it to validate Authorization: Negotiate tokens.

gssapi_require_crypto: bool

Whether GSSAPI requires cryptographic ticket verification.

When true (the default), structural-only parsing of Kerberos tokens is rejected — libgssapi integration is required. When false, the server accepts structural parsing and returns a krb5-sname: prefixed identity (the service name from the ticket, not a verified client identity).

dogtag: Option<Arc<DogtagPool>>

Dogtag PKI client pool (present when [dogtag] is configured).

Routes enrollment, CMC, and key generation requests to Dogtag CA/KRA backends when configured as an alternative to direct signing.

star_manager: Option<Arc<StarManager>>

STAR certificate manager (present when [star] is enabled).

Manages active STAR orders and their renewal state (RFC 8739).

startup_time: Instant

Timestamp when the server process started.

Used for uptime reporting in health endpoints and session expiry calculations.

Implementations

impl AppState

pub fn default_ca(&self) -> &Arc<CaState>

Return the default CA state.

Panics

Panics if default_ca_id is not present in cas. This indicates a bug in the startup code — Config::validate() ensures the default CA exists.

pub fn get_ca(&self, ca_id: &str) -> Option<&Arc<CaState>>

Look up a CA by its identifier. Returns None for unknown IDs.

pub fn default_ca_cert_der(&self) -> Option<Vec<u8>>

Returns the DER-encoded certificate of the default CA.

Used by the OCSP client (RFC 6960) to build CertID structures for revocation checking of client certificates (RHELBU-3536 R21). Returns None if no default CA is configured or the cert is empty.

pub async fn admit_enrollment( &self, identity: &str, operation: &str, ) -> Result<(), KipukaError>

Required durable admission event before any certificate/key mutation.

pub async fn record_audit_event(&self, event_type: &str, detail: &str)

Record an audit event, logging (but not propagating) any DB error.

Convenience wrapper that bundles the DB pool and audit state so call sites only need to pass the event type and detail.

pub async fn record_audit_event_with_actor( &self, event_type: &str, actor: &str, detail: &str, )

Record an audit event that carries a responsible actor identity.

Populates the actor column (via AuditEvent::with_operator) so the FAU_SAR.1 review endpoint can filter by actor. Used where the responsible principal is known — enrollment-authorization denials (FDP_ACF.1) and audit-trail review — so those events are attributable rather than leaving actor NULL and the filter inert.

Trait Implementations

impl Clone for AppState

fn clone(&self) -> AppState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.